Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/5y5dPq2f70DWveQYyRO5wZc9D98.roa
File: 5y5dPq2f70DWveQYyRO5wZc9D98.roa (raw, json)
Hash identifier: Wkjte+p2lU/z7l+wyNEB6n5Ex1MQ/WBehurpCFz/d6U=
Subject key identifier: E7:2E:5D:3E:AD:9F:EF:40:D6:BD:E4:18:C9:13:B9:C1:97:3D:0F:DF
Certificate issuer: /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial: 01A0DD047E81C694672B1263CC14A9BBC8B1
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/5y5dPq2f70DWveQYyRO5wZc9D98.roa
Signing time: Sat 26 Sep 2026 09:20:54 +0000
ROA not before: Sat 26 Sep 2026 09:20:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218626
IP address blocks: 195.234.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:04:7e:81:c6:94:67:2b:12:63:cc:14:a9:bb:c8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Validity
Not Before: Sep 26 09:20:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e72e5d3ead9fef40d6bde418c913b9c1973d0fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:00:69:c3:90:e0:e6:f2:43:bf:36:89:ad:66:
25:ea:c1:8b:66:64:8b:90:c7:4e:63:fa:3f:ca:cd:
8b:fa:e7:62:91:92:78:9d:e0:d2:4b:6a:63:a5:a2:
6f:b0:64:d1:26:91:2b:43:4f:52:5b:bc:e6:a5:dd:
d2:2b:47:aa:72:c1:5f:b2:fa:18:d3:16:91:92:33:
54:40:74:71:fd:dc:38:4e:b2:64:4f:71:65:0f:d3:
ff:1b:8d:ca:dd:78:7f:9a:1c:31:11:d0:8a:39:93:
01:f9:97:53:63:3a:1c:b3:47:3a:42:15:82:2e:8d:
b3:58:83:b2:a2:1a:d7:d5:b1:2f:71:9a:b4:10:37:
d6:db:38:f2:5c:42:b5:5f:bc:76:5a:26:e9:41:65:
7a:9b:83:55:81:88:0b:f2:fa:78:65:9c:51:f9:f4:
54:85:7b:9e:d4:1e:c5:0b:02:f3:35:1c:22:e1:48:
aa:0b:09:2d:8f:7b:fd:9b:37:1d:47:31:62:2b:35:
b3:17:c4:6d:14:14:81:ce:07:0d:cc:85:9d:d3:bb:
da:57:a3:4b:7d:24:47:49:0e:c0:d7:6d:2f:3b:8d:
3a:63:97:f2:d3:bc:81:a9:c7:62:03:5c:83:84:94:
83:18:22:a5:e4:bb:84:bf:41:65:30:1a:d9:36:c4:
a0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2E:5D:3E:AD:9F:EF:40:D6:BD:E4:18:C9:13:B9:C1:97:3D:0F:DF
X509v3 Authority Key Identifier:
keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/5y5dPq2f70DWveQYyRO5wZc9D98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.80.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1c:d6:60:f6:8b:9f:78:d9:e6:62:7c:7d:fd:9e:c3:e3:bb:
09:65:12:64:bf:d2:34:af:f8:95:31:22:f2:58:5d:a5:2e:54:
54:b5:5c:dc:47:b7:01:89:26:9a:ff:fd:f2:6b:6d:13:ca:a7:
6c:38:7f:fe:c7:ea:ee:e5:f0:a2:56:84:49:e3:cd:db:46:b5:
d1:fc:97:5b:5b:fa:08:f2:c1:a1:e0:c5:29:8a:70:11:1e:f0:
47:d3:30:3b:54:3b:e1:9a:ad:1f:bd:ce:b6:ac:c3:8b:2e:bf:
6c:db:0a:cf:43:d7:31:25:04:6c:1c:4f:f8:b9:07:0a:28:21:
92:9d:8d:2d:3c:bc:5c:8a:9a:f0:0c:ee:35:55:5c:a4:7c:c9:
fe:22:63:49:52:37:21:bf:e8:17:cc:15:7f:72:6b:e6:1d:66:
91:85:76:7e:46:41:4b:bd:ea:9e:33:7c:1c:01:85:c3:b1:e5:
ff:ee:4e:4d:de:a5:76:62:ee:4c:98:f0:88:e1:50:88:c9:91:
d6:0d:55:41:aa:d3:71:0c:d4:32:de:67:d5:c9:6c:88:ab:fd:
7f:bd:64:41:db:f7:b7:8e:2c:ef:b6:0d:35:3a:5b:fd:fb:1c:
1b:08:8f:1e:11:78:2a:d0:55:7f:c3:c8:a6:51:67:08:b6:4f:
3f:ca:eb:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDdBH6BxpRnKxJjzBSpu8ixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ODhiNDIxNzVkNjIxNGEzMWE1NDA3ZGI4YjZjOTVmMWVj
NjBkNGUwHhcNMjYwOTI2MDkyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzJlNWQzZWFkOWZlZjQwZDZiZGU0MThjOTEzYjljMTk3M2QwZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QBpw5Dg5vJDvzaJrWYl6sGLZmSL
kMdOY/o/ys2L+udikZJ4neDSS2pjpaJvsGTRJpErQ09SW7zmpd3SK0eqcsFfsvoY
0xaRkjNUQHRx/dw4TrJkT3FlD9P/G43K3Xh/mhwxEdCKOZMB+ZdTYzocs0c6QhWC
Lo2zWIOyohrX1bEvcZq0EDfW2zjyXEK1X7x2WibpQWV6m4NVgYgL8vp4ZZxR+fRU
hXue1B7FCwLzNRwi4UiqCwktj3v9mzcdRzFiKzWzF8RtFBSBzgcNzIWd07vaV6NL
fSRHSQ7A120vO406Y5fy07yBqcdiA1yDhJSDGCKl5LuEv0FlMBrZNsSgVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOcuXT6tn+9A1r3kGMkTucGXPQ/fMB8GA1UdIwQY
MBaAFFaItCF11iFKMaVAfbi2yV8exg1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9pMElYWFdJVW94cFVCOXVMYkpYeDdHRFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84M2Q2ZmEtNDYxZC00YTU2LWE4NDQt
OWY5NDJiYzEyYTdlLzEvNXk1ZFBxMmY3MERXdmVRWXlSTzV3WmM5RDk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84M2Q2ZmEtNDYxZC00YTU2LWE4NDQtOWY5NDJiYzEyYTdl
LzEvVm9pMElYWFdJVW94cFVCOXVMYkpYeDdHRFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+pQMA0G
CSqGSIb3DQEBCwUAA4IBAQBAHNZg9oufeNnmYnx9/Z7D47sJZRJkv9I0r/iVMSLy
WF2lLlRUtVzcR7cBiSaa//3ya20TyqdsOH/+x+ru5fCiVoRJ483bRrXR/JdbW/oI
8sGh4MUpinARHvBH0zA7VDvhmq0fvc62rMOLLr9s2wrPQ9cxJQRsHE/4uQcKKCGS
nY0tPLxciprwDO41VVykfMn+ImNJUjchv+gXzBV/cmvmHWaRhXZ+RkFLveqeM3wc
AYXDseX/7k5N3qV2Yu5MmPCI4VCIyZHWDVVBqtNxDNQy3mfVyWyIq/1/vWRB2/e3
jizvtg01Olv9+xwbCI8eEXgq0FV/w8imUWcItk8/yuuV
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:32 2026 by rpki-client